
NHS
UK publicly funded health service; central to devolved elections and repeated cyber-supply-chain attacks.
Last refreshed: 29 May 2026 · Appears in 2 active topics
How are the 2026 devolved election parties planning to fix NHS waiting lists?
Timeline for NHS
Mentioned in: Health Sec Streeting walks on Starmer
UK Local Elections 2026Mentioned in: Plaid takes Cardiff after 27 years
UK Local Elections 2026Mentioned in: Ivanti EPMM logs fourth KEV zero-day since 2023
Cybersecurity: Threats and DefencesUK cyber sector clears 14.7bn pounds
Cybersecurity: Threats and DefencesMentioned in: KB5091157, Gentlemen C2 intel, ENISA CNAs: in brief
Cybersecurity: Threats and DefencesWhat are the Scottish parties promising for the NHS in 2026?
What is Plaid Cymru promising for the NHS in Wales?
Background
Founded in 1948 and funded through general taxation, the National Health Service operates as four separate organisations across England, Scotland, Wales, and Northern Ireland following devolution. NHS Scotland and NHS Wales are fully devolved, meaning Holyrood and the Senedd hold primary responsibility for their budgets and structures. NHS England is administered by the UK Government and indirectly affects devolved nations through Barnett formula consequentials. With more than 1.4 million staff in England alone, the NHS is the world's largest publicly funded single-payer health system.
The NHS features as a core funding pressure in the 2026 Scottish Parliament and Senedd elections, with party manifestos making competing pledges on waiting times, surgical hubs, and staffing. The Fraser of Allander Institute and IFS analyses of manifesto costings identify NHS budget commitments as among the most expensive and potentially unaffordable pledges: the SNP overstates NHS consequentials by £1.6 billion; the Scottish Conservatives underestimate their NHS pledge by at least £600 million. Plaid Cymru's Senedd manifesto centres NHS relief, promising ten new surgical hubs for Wales; Welsh Labour pledged a £4 billion NHS investment programme. With waiting lists at record highs after the Covid-19 pandemic, NHS performance has become the dominant domestic issue in the 2026 devolved elections.
The NHS and its supply chain have become a persistent target for state-linked and criminal cyber actors. In March 2026 Iran-linked hacktivist group Handala wiped between 80,000 and 200,000 Stryker medical devices across 79 countries, with NHS trusts among the affected operators; the attack exploited a single stolen Microsoft Intune credential. The UK Government's response included a £90 million funding commitment from DSIT in May 2026 specifically targeting NHS suppliers and SMEs, alongside the voluntary Cyber Resilience Pledge which requires signatories to attain Cyber Essentials across supply chains. The supply-chain threat model now treats NHS procurement as a systemic attack surface rather than a set of isolated incidents.